CVE-2026-10566Medium· 5.3▾ SunlitFoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 9.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.1%
A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct_content of the file metagpt/schema.py. Executing a manipulation of the argument mapping can lead to deserialization. The attack is restricted to local execution. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
metagpt <= 0.8.2Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-6110High· 7.3MetaGPT has an eval injection in metagpt/strategy/tot.py
CVE-2026-5972High· 7.3FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command
CVE-2026-6109Medium· 4.3MetaGPT has an eval injection via a cross-site request forgery attack
CVE-2026-6111Medium· 6.3MetaGPT affected by server-side request forgery in metagpt/utils/common.py
CVE-2026-5973High· 7.3FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py
CVE-2026-5970High· 7.3MetaGPT has an Injection issue